
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
File: 19043EA2870011F194514C90ABEE528E.roa (raw, json)
Hash identifier: BzBVaNtbVuS2bl3IWoMcduF0FYTSvfV6bKgxcVL+8hE=
Subject key identifier: CD:37:CE:16:D1:D8:FE:B0:12:60:89:CC:BB:B3:77:13:59:B2:4B:52
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 144A
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
Signing time: Thu 06 Aug 2026 17:33:59 +0000
ROA not before: Thu 06 Aug 2026 17:33:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55430
IP address blocks: 27.125.128.0/18 maxlen: 24
39.109.128.0/17 maxlen: 24
58.96.192.0/18 maxlen: 24
101.127.0.0/17 maxlen: 24
101.127.128.0/18 maxlen: 24
101.127.240.0/21 maxlen: 24
103.17.146.0/24 maxlen: 24
182.19.128.0/17 maxlen: 24
182.55.0.0/16 maxlen: 24
183.90.0.0/17 maxlen: 24
2406:3003::/32 maxlen: 40
2406:3003::/40 maxlen: 48
2406:3003:1000::/40 maxlen: 48
2406:3003:2000::/40 maxlen: 48
2406:3003:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5194 (0x144a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 6 17:33:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74c587-3ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:ae:de:c6:78:b5:2d:73:59:38:03:a4:aa:
d6:d5:72:a3:29:ca:e2:4b:23:9f:d9:bc:b4:48:0c:
77:7c:53:06:3d:96:32:0c:8a:1f:ee:b9:ef:76:17:
06:f6:5a:c1:ba:6c:d8:81:69:9a:16:c6:cd:02:89:
8b:99:a1:d7:3a:9d:be:4c:ec:77:20:43:50:26:b1:
04:31:2f:b8:ba:a1:e0:c4:a5:08:0d:ae:dc:ae:84:
99:b4:9e:25:06:d0:4c:53:54:2d:6d:71:04:4c:e1:
e1:4f:05:2c:3e:bb:7d:80:fe:a0:d6:a1:d3:68:f9:
4b:0b:85:45:ba:af:21:d6:76:37:32:9d:a5:ab:bc:
46:e5:b9:5d:81:11:b9:41:61:e5:53:00:86:72:7a:
87:af:89:f4:78:79:c1:58:59:af:6e:95:2e:9e:89:
ea:61:61:83:3b:8e:c7:dd:99:67:5c:23:d4:f6:3b:
b3:c0:f5:89:15:f0:0e:61:93:d6:a2:c3:73:7f:9b:
e6:aa:5d:7e:97:1d:a6:4d:67:64:61:17:89:bf:0a:
af:16:32:98:e5:0e:6c:7a:aa:8f:06:4f:ab:9e:bf:
4e:a7:d0:49:b0:f9:de:68:79:f4:e3:b7:f0:ff:a5:
f8:09:2d:e6:43:d4:0a:4b:a9:b6:7a:2c:89:2d:76:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:CE:16:D1:D8:FE:B0:12:60:89:CC:BB:B3:77:13:59:B2:4B:52
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
27.125.128.0/18
39.109.128.0/17
58.96.192.0/18
101.127.0.0-101.127.191.255
101.127.240.0/21
103.17.146.0/24
182.19.128.0/17
182.55.0.0/16
183.90.0.0/17
IPv6:
2406:3003::/32
Signature Algorithm: sha256WithRSAEncryption
ae:40:12:69:33:cc:b0:7e:7e:b3:2b:a6:b3:b5:78:40:27:a8:
78:29:a3:bd:99:95:33:fd:02:a6:fa:1a:88:19:76:df:24:2d:
42:61:87:b3:7d:a2:b6:19:ba:86:d8:9c:6b:41:73:89:f9:31:
71:dc:25:08:d4:4e:40:01:23:d1:d7:b2:19:8c:ed:f8:9c:27:
4b:d5:e5:34:a5:1c:de:94:55:ed:9f:a2:21:26:ce:e9:36:35:
b3:80:8d:17:e1:04:59:09:56:27:de:26:93:3a:a9:ec:8b:25:
e5:a0:28:cc:6d:8a:ad:9f:02:22:e7:ac:a4:95:f3:f5:cd:5c:
87:e3:11:f5:87:07:c6:19:e9:04:8d:da:3d:09:1a:c3:e3:31:
88:cc:2b:7c:65:0c:92:53:f9:ed:89:f5:b2:a6:0a:eb:69:54:
0d:07:7b:45:fe:ab:7c:98:99:ac:0d:cb:20:23:fa:d3:cb:b1:
c7:7b:65:4e:76:dc:b6:61:09:a0:9b:8f:0f:29:3c:39:5e:8a:
62:14:28:62:80:6b:77:2b:68:08:74:a0:6a:9c:6e:eb:4e:07:
bc:40:fd:a6:6f:6d:e5:0a:f8:c4:b3:e0:61:85:73:11:d2:d6:
e7:2e:03:c7:b8:fe:95:6c:b4:e6:03:8f:ca:15:29:8a:46:a4:
6a:7d:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:49:21 2026 by rpki-client